Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/3136302e3233382e3134382e302f32322d3332203d3e20323636353533.roa
File:                     3136302e3233382e3134382e302f32322d3332203d3e20323636353533.roa (raw, json)
Hash identifier:          1yXVmFixbLIu9rngJtkL5YChRM+9IhZoUgSpXTaKh/U=
Subject key identifier:   5C:EF:3E:85:60:8C:AB:1C:3E:75:42:57:6A:0B:A1:88:F9:2A:5D:B9
Certificate issuer:       /CN=14F766039A22FDF037ECF0775453B10B73542821
Certificate serial:       2784217BC0C39BA440C403AC1F037A4DB03DA600
Authority key identifier: 14:F7:66:03:9A:22:FD:F0:37:EC:F0:77:54:53:B1:0B:73:54:28:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F766039A22FDF037ECF0775453B10B73542821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/3136302e3233382e3134382e302f32322d3332203d3e20323636353533.roa
Signing time:             Thu 06 Mar 2025 10:54:47 +0000
ROA not before:           Thu 06 Mar 2025 10:49:47 +0000
ROA not after:            Thu 05 Mar 2026 10:54:47 +0000
asID:                     266553
IP address blocks:        160.238.148.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/14F766039A22FDF037ECF0775453B10B73542821.crl
                          rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/14F766039A22FDF037ECF0775453B10B73542821.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F766039A22FDF037ECF0775453B10B73542821.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:84:21:7b:c0:c3:9b:a4:40:c4:03:ac:1f:03:7a:4d:b0:3d:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F766039A22FDF037ECF0775453B10B73542821
        Validity
            Not Before: Mar  6 10:49:47 2025 GMT
            Not After : Mar  5 10:54:47 2026 GMT
        Subject: CN=5CEF3E85608CAB1C3E7542576A0BA188F92A5DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:30:28:8d:0d:45:93:50:0d:22:82:73:d6:41:
                    e8:0a:21:41:93:49:b3:35:bf:7d:c5:38:60:6e:c5:
                    af:a9:3a:21:0e:9b:76:c1:a7:a9:14:7f:64:e1:18:
                    dc:4c:0a:a1:71:54:b6:67:b6:f9:28:0f:a9:7a:9e:
                    44:50:c9:65:fd:38:10:35:6a:20:fc:dd:31:fa:44:
                    e5:a2:ad:e5:c0:2c:1a:88:cf:bd:b2:b1:0d:52:fa:
                    47:89:1a:53:a8:89:03:50:bd:70:7b:b0:96:27:b8:
                    90:55:e9:68:b2:f5:30:fb:49:7d:36:3b:47:5c:88:
                    9a:2b:3c:92:a6:e1:0b:c2:fe:09:ec:b5:3c:52:e4:
                    f2:1c:b5:53:8c:70:d7:99:28:ff:b3:e2:74:c7:f3:
                    c6:1a:9a:c8:39:a5:41:14:87:9e:a0:a7:85:28:75:
                    c6:09:34:17:39:e8:5b:e1:bb:49:a2:08:f4:c3:99:
                    fa:7f:ff:dc:8c:12:b9:92:bb:c9:a9:c3:5b:87:14:
                    31:b6:b0:35:f9:0a:52:90:3f:3e:af:1c:eb:e8:07:
                    22:06:13:1a:fd:44:db:a1:70:35:cd:08:54:06:70:
                    2e:9c:85:62:4b:28:73:2b:51:aa:d5:20:2c:cb:76:
                    36:d0:d5:94:b4:2f:f5:50:43:92:1e:f7:fe:f9:7b:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EF:3E:85:60:8C:AB:1C:3E:75:42:57:6A:0B:A1:88:F9:2A:5D:B9
            X509v3 Authority Key Identifier:
                keyid:14:F7:66:03:9A:22:FD:F0:37:EC:F0:77:54:53:B1:0B:73:54:28:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/14F766039A22FDF037ECF0775453B10B73542821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F766039A22FDF037ECF0775453B10B73542821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/3136302e3233382e3134382e302f32322d3332203d3e20323636353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:5e:ee:83:9b:68:1c:e7:eb:ce:77:96:9f:00:76:51:e9:61:
         58:10:26:eb:16:fd:3d:c6:75:ad:a8:da:53:de:70:e2:12:3b:
         d2:5a:bf:40:6f:7a:0e:9b:3e:c4:5d:73:da:c5:c2:b4:28:dc:
         37:8e:3d:83:a5:a0:04:ae:95:80:3d:47:c5:57:f9:01:ba:a2:
         84:11:d1:79:44:ce:02:0b:f4:a7:16:57:87:06:d7:64:64:9e:
         ee:0a:3f:20:ed:96:4c:92:6c:62:74:36:48:67:1a:cd:b6:01:
         89:bc:54:fa:27:ee:39:29:b1:af:da:fa:86:b5:4e:f7:62:0f:
         86:02:08:ee:96:f3:3d:27:41:08:4e:c4:dc:75:ec:9e:f7:95:
         28:0e:74:8f:2e:75:37:9e:d4:c3:48:2d:7c:4b:af:93:1f:e7:
         8c:ac:df:5a:b9:8d:25:48:3a:12:9b:a0:73:49:3f:13:22:e7:
         13:14:1e:af:1c:50:27:ed:b0:c0:2a:53:8e:bd:47:39:b9:c7:
         17:97:5b:68:eb:a1:64:d4:70:de:03:47:f1:ba:70:a7:af:4f:
         90:68:68:ea:41:7d:ed:63:35:39:2e:17:0a:7c:1c:ec:6b:ed:
         7c:2f:3b:4c:77:8b:68:24:46:29:a6:4e:2b:c7:4c:99:f0:cc:
         51:f8:c0:bf
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJ4Qhe8DDm6RAxAOsHwN6TbA9pgAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGNzY2MDM5QTIyRkRGMDM3RUNGMDc3NTQ1M0IxMEI3
MzU0MjgyMTAeFw0yNTAzMDYxMDQ5NDdaFw0yNjAzMDUxMDU0NDdaMDMxMTAvBgNV
BAMTKDVDRUYzRTg1NjA4Q0FCMUMzRTc1NDI1NzZBMEJBMTg4RjkyQTVEQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYMCiNDUWTUA0ignPWQegKIUGT
SbM1v33FOGBuxa+pOiEOm3bBp6kUf2ThGNxMCqFxVLZntvkoD6l6nkRQyWX9OBA1
aiD83TH6ROWireXALBqIz72ysQ1S+keJGlOoiQNQvXB7sJYnuJBV6Wiy9TD7SX02
O0dciJorPJKm4QvC/gnstTxS5PIctVOMcNeZKP+z4nTH88Yamsg5pUEUh56gp4Uo
dcYJNBc56Fvhu0miCPTDmfp//9yMErmSu8mpw1uHFDG2sDX5ClKQPz6vHOvoByIG
Exr9RNuhcDXNCFQGcC6chWJLKHMrUarVICzLdjbQ1ZS0L/VQQ5Ie9/75e8ezAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUXO8+hWCMqxw+dUJXaguhiPkqXbkwHwYDVR0j
BBgwFoAUFPdmA5oi/fA37PB3VFOxC3NUKCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTF4VENpU3hYS1hmbmN4NXhSbzhiTXNmV1JHV1R2NUY3YUNTNFNHaVVR
UU0vMS8xNEY3NjYwMzlBMjJGREYwMzdFQ0YwNzc1NDUzQjEwQjczNTQyODIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0Rjc2NjAzOUEyMkZERjAz
N0VDRjA3NzU0NTNCMTBCNzM1NDI4MjEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ExeFRDaVN4WEtYZm5jeDV4Um84Yk1zZldSR1dUdjVGN2FDUzRTR2lVUVFNLzEv
MzEzNjMwMmUzMjMzMzgyZTMxMzQzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNjM1MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqDulDANBgkqhkiG9w0BAQsFAAOCAQEAIl7u
g5toHOfrzneWnwB2UelhWBAm6xb9PcZ1rajaU95w4hI70lq/QG96Dps+xF1z2sXC
tCjcN449g6WgBK6VgD1HxVf5AbqihBHReUTOAgv0pxZXhwbXZGSe7go/IO2WTJJs
YnQ2SGcazbYBibxU+ifuOSmxr9r6hrVO92IPhgII7pbzPSdBCE7E3HXsnveVKA50
jy51N57Uw0gtfEuvkx/njKzfWrmNJUg6Epugc0k/EyLnExQerxxQJ+2wwCpTjr1H
ObnHF5dbaOuhZNRw3gNH8bpwp69PkGho6kF97WM1OS4XCnwc7GvtfC87THeLaCRG
KaZOK8dMmfDMUfjAvw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 19:43:34 2025 by rpki-client